Hi Dave,

If we investigate the GetAnonymous with reflector, we will get as below
that is just a new Identity without token informaiton.
public static WindowsIdentity GetAnonymous()
{
     return new WindowsIdentity();
}

Also what is your concrete environment, in a domain/workgroup.

Because based on my test, as long as the share is for everyone(both NTFS
and network share security), then even if the user credential is not
explicitly granted permission on the share source, we can still access to
that resrouce.

Can describe your scenario more detailed? e.g. what is your ultimate goal?

Best regards,

Perter Huang
Microsoft Online Partner Support